Description

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen).

Remediation

References

CVE-2019-19212

Related Vulnerabilities

WordPress Plugin Slack-Chat Information Disclosure (1.5.5)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-10968)

WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (4.0.2)

WordPress Plugin Simple Dropbox Upload Arbitrary File Upload (1.8.8)

WordPress Plugin Category and Page Icons Multiple Vulnerabilities (0.9.1)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2019-19212